openssl x509 -in microsoft-root-2011.cer -text -noout
Although issued in 2011, it remains critical for validating older software signed before its expiration date. Manual Installation microsoft root certificate authority 2011cer work